Last updated November 10, 2026
Agreement
These terms are an agreement between you and ToGODer ("we", "us"), which runs Togoder Security at security.togoder.click. By using the website, the API or the command-line tool, you accept these terms. If you use the service for an organization, you accept them on its behalf.
The service
Togoder Security reads the dependency list from a lockfile, manifest or package name you provide, downloads the listed public packages from their official registries without running them, and has AI models review their source code for malicious or risky behavior. Results are shown to you and published as public package reports.
Results are guidance, not a guarantee
Findings are produced by AI models and can be wrong in both directions: a package marked safe can still be malicious, and a flagged one can be harmless. Use the results as one input to your own review. You remain responsible for what you install and run.
Accounts and API keys
You can sign in with GitHub or Google. Keep your API keys secret: anything done with your keys counts as done by you, and you can revoke a key at any time from the account page. Give accurate information and keep your sign-in account secure.
Prices and payment
Current prices are on the pricing page. Scanning new code takes a prepaid balance or a monthly subscription:
- Prepaid balance. You can pay in advance from a signed-in account, by card, Apple Pay or Google Pay through Polar, with VAT or sales tax added at checkout where it applies. The minimum top-up is $20. Each scan of new code is quoted first, then deducted from the balance at the quoted price, and scans the service fails on are returned to it. The balance does not expire. It is not transferable and it is not cash. Unused balance is refundable from your account page; see the refund policy. If a chargeback or refund leaves the balance negative, scans are blocked.
- Automatic top-ups. Automatic top-up is off until you turn it on from your account page. When you turn it on, you authorize us to charge the card saved with Polar, without further action from you, each time your balance falls below the threshold you set: the top-up amount you set, plus VAT or sales tax where it applies, or more if a single scan needs more, but never more in total than the limit you set for any 30 days. A scan that the balance can't cover waits for the charge. Each charge is a top-up order through Polar like any other, with a receipt, and is refundable under the refund policy. If a charge is declined, automatic top-up turns off and we tell you on the account page. You can turn it off or change the amounts at any time; this stops future charges. Refunding your balance also turns it off.
- Monthly subscriptions. Our order process is conducted by our authorized reseller Polar Software, Inc. (polar.sh). Polar is the merchant of record for all our subscription and top-up orders and handles payment, VAT and sales tax, and invoices; Polar's buyer terms apply to the purchase. A subscription renews every month until cancelled. You can cancel at any time from the account page; access continues to the end of the paid period. Upgrades take effect immediately with a prorated charge, downgrades at the next renewal.
Each plan includes a number of LLM tokens per rolling 30 days. A scan that would exceed what is left is refused before it starts; unused tokens do not carry over. If we change the price of a plan, we tell subscribers at least 30 days in advance and the new price applies from the next renewal after that, so you can cancel first.
What you upload and public reports
Only upload files you are allowed to share. We use a lockfile or manifest to read the names and versions of your dependencies; do not include secrets in it. The uploaded file itself is not published. The scan results for each public package version become a public report that anyone can read; reports never say who requested a scan. You may read, link to and quote the reports. Package source code belongs to its authors and is used under its license.
Acceptable use
Do not use the service to break the law, attack or overload it, get around payment or usage limits, access other people's accounts, or resell access to the API as your own scanning service. Automated reading of the public reports is welcome if it follows robots.txt and does not degrade the service for others.
Availability and changes
We work to keep the service running but do not promise any particular uptime. We may change or remove features. If a change materially reduces what a paid plan includes, we tell subscribers in advance and they may cancel and request a refund for the unused part of the current period.
Suspension and ending
You can stop using the service and cancel your subscription at any time. We may suspend or close an account that seriously or repeatedly breaks these terms, after a warning where that is reasonable. If we close an account without such a breach, we refund the unused part of the current period.
Warranty and liability
The service is provided "as is", without warranties of any kind, to the extent the law allows. We are not liable for indirect or consequential losses, such as lost profits, lost data or the cost of a security incident caused by a package. Our total liability for any claim is limited to the amount you paid us in the 12 months before the claim. Nothing in these terms limits liability that cannot be limited by law, or your rights as a consumer under the law of the country where you live.
Governing law
These terms are governed by the laws of the Netherlands, and disputes go to its courts. If you are a consumer, you also keep the protection of the mandatory laws of your country of residence and may bring a claim there.
Changes to these terms
We may update these terms. The date at the top shows the latest version. For material changes we give subscribers at least 30 days' notice; continuing to use the service after that means you accept the new terms.
Contact
Questions about these terms: email tanevanwifferen@gmail.com. Invoices, the payment method and cancelling are in Polar's customer portal, where you sign in with the email you subscribed with. Billing questions can also go to Polar at support@polar.sh.